This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa File: fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa (raw, json) Hash identifier: +EWF1YOQC0iD+DRFwjKk4zqs+TQJdEPZLGOkU9Q+yh4= Subject key identifier: 96:85:FD:D4:E4:62:42:50:DA:3B:D6:3B:A4:0A:9A:20:6F:FF:9D:13 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 30C788B0288CB638383A1F852371D8680B9B38C7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa Signing time: Sat 15 Nov 2025 05:50:52 +0000 ROA not before: Sat 15 Nov 2025 05:50:52 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c7:88:b0:28:8c:b6:38:38:3a:1f:85:23:71:d8:68:0b:9b:38:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:50:52 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=48a7d1a6122d8d74c2fe4f16206a00b418abd0e1e6f04eb1fb5b6720ac11fc6d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:f6:0b:23:e9:7b:1f:2d:98:58:43:b7:bd: 35:51:60:a5:b6:7d:83:b5:da:02:f0:fb:59:cb:73: c5:7b:f0:d7:7c:9d:6f:1b:8e:b2:d6:57:83:85:c0: ca:90:23:7f:8b:7c:df:9c:e6:39:c9:87:32:6c:ed: f7:00:67:d1:2a:59:33:ba:31:45:b3:20:89:f7:4b: 02:c4:98:9d:7e:01:25:3d:03:2e:5b:85:77:e7:ad: 27:39:05:b8:04:97:aa:1d:ad:ff:99:38:7f:e3:ba: aa:88:9e:e9:a8:b1:00:f7:dd:f0:d1:7e:ab:79:f7: 85:7d:80:19:98:a2:48:67:c2:af:70:6d:52:31:de: d2:44:c4:aa:80:1e:fb:24:b4:91:c7:ce:24:56:2d: 08:a0:e6:a5:f7:da:c8:b5:04:ae:8b:fa:a5:7d:60: d8:80:d3:f9:cd:6c:53:de:54:9c:fa:da:bd:97:75: 8c:43:3e:1e:1e:7d:25:1e:8a:62:39:c8:4a:9f:76: 68:82:8f:e3:48:29:f1:c9:79:cd:35:04:68:37:d5: 59:d2:d8:bd:fc:7e:ee:66:db:9c:f7:86:a7:ae:8d: f0:5b:be:df:4e:fb:d0:78:be:23:75:1d:87:51:36: c6:0a:18:e0:e6:42:18:20:e2:da:8c:5b:75:02:85: 44:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:FD:D4:E4:62:42:50:DA:3B:D6:3B:A4:0A:9A:20:6F:FF:9D:13 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:80c0::/48 Signature Algorithm: sha256WithRSAEncryption ab:d9:f9:60:8e:c7:46:2c:79:bc:96:fc:e6:f6:42:49:5c:93: 9f:98:06:94:16:42:2f:19:6a:8f:48:14:b2:05:f1:4f:15:24: 50:f2:ad:9e:db:8a:ff:c1:a1:de:c9:9d:0c:7d:53:22:91:4c: f3:12:48:fb:16:65:5d:da:3d:11:1e:4c:ca:87:55:b4:31:70: 82:97:51:46:8e:dd:d8:46:00:13:5d:87:ec:10:6b:0d:de:02: 27:fc:94:f5:4e:1d:18:2a:26:3a:75:dd:3e:3c:85:0c:67:18: f0:54:95:c1:ed:b6:79:2b:fd:61:63:c7:7a:07:7a:4d:40:fe: ea:33:5a:f5:2a:83:c1:8f:6e:30:33:99:20:bf:ac:c1:b4:e0: c1:1d:15:36:86:a7:ae:93:4d:99:e5:15:72:44:64:df:00:54: 03:3d:34:50:9a:81:b9:9f:cd:14:a8:05:8a:b0:ad:34:b1:ac: 02:db:b5:d4:c0:3b:f2:75:a9:31:30:eb:07:1a:be:52:ca:8a: 4f:82:d0:46:7f:44:33:f8:07:8a:49:cc:71:48:03:ed:dc:4c: 00:93:c9:e1:4d:cc:76:a6:f5:65:de:fe:59:fe:91:15:4b:9e: 40:4e:3b:70:6d:3f:29:0e:c3:c1:80:96:5c:72:02:33:8a:26: 23:5b:07:53 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUMMeIsCiMtjg4Oh+FI3HYaAubOMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTUwNTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDQ4YTdkMWE2MTIyZDhkNzRjMmZlNGYxNjIwNmEwMGI0MThhYmQwZTFlNmYw NGViMWZiNWI2NzIwYWMxMWZjNmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyw9gsj6XsfLZhYQ7e9NVFgpbZ9g7XaAvD7WctzxXvw13ydbxuOstZXg4XA ypAjf4t835zmOcmHMmzt9wBn0SpZM7oxRbMgifdLAsSYnX4BJT0DLluFd+etJzkF uASXqh2t/5k4f+O6qoie6aixAPfd8NF+q3n3hX2AGZiiSGfCr3BtUjHe0kTEqoAe +yS0kcfOJFYtCKDmpffayLUErov6pX1g2IDT+c1sU95UnPravZd1jEM+Hh59JR6K YjnISp92aIKP40gp8cl5zTUEaDfVWdLYvfx+7mbbnPeGp66N8Fu+30770Hi+I3Ud h1E2xgoY4OZCGCDi2oxbdQKFRNECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSWhf3U 5GJCUNo71jukCpogb/+dEzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmNlN2EwM2ItOWU5MC00OTIxLTljNTYtNWIwYmQ0ZTYwZWQwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA wDANBgkqhkiG9w0BAQsFAAOCAQEAq9n5YI7HRix5vJb85vZCSVyTn5gGlBZCLxlq j0gUsgXxTxUkUPKtntuK/8Gh3smdDH1TIpFM8xJI+xZlXdo9ER5MyodVtDFwgpdR Ro7d2EYAE12H7BBrDd4CJ/yU9U4dGComOnXdPjyFDGcY8FSVwe22eSv9YWPHegd6 TUD+6jNa9SqDwY9uMDOZIL+swbTgwR0VNoanrpNNmeUVckRk3wBUAz00UJqBuZ/N FKgFirCtNLGsAtu11MA78nWpMTDrBxq+UsqKT4LQRn9EM/gHiknMcUgD7dxMAJPJ 4U3Mdqb1Zd7+Wf6RFUueQE47cG0/KQ7DwYCWXHICM4omI1sHUw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:31 2025 by rpki-client